What we use
RSVPeas uses a single first-party session cookie called rsvpeas_session. It stores a random token that maps to a server-side session row. Without it, you can't stay signed in.
- Name:
rsvpeas_session - Purpose: keep you signed in
- Duration: until you sign out or the session expires
- HttpOnly: yes (not readable from JavaScript)
- SameSite: Lax
Staff users may also see a short-lived rsvpeas_impersonate cookie when actively impersonating another user for support purposes.
What we don't use
- No Google Analytics, no Facebook Pixel, no LinkedIn tag.
- No advertising cookies.
- No cross-site tracking.
- No email open pixels.
Local storage
We use a small amount of browser localStorage for things you've chosen: your theme preference (day/night), audio toggle on pod pages, dismissed notices. This data never leaves your browser.
Third parties
When you check out for Premium, Stripe sets its own cookies on its checkout page (stripe.com domain), governed by Stripe's privacy policy. That happens on Stripe's site, not ours.
Your choices
You can clear cookies in your browser at any time. Clearing rsvpeas_session signs you out. You can also reach out at [email protected] with questions.